Detections
Analytics
VCLU-80-000062 - The vCenter Lookup service must be configured to fail to a known safe state if system initialization fails.
Information
Determining a safe state for failure and weighing that against a potential denial of service for users depends on what type of application the web server is hosting. It is preferable that the service abort startup on any initialization failure rather than continuing in a degraded, and potentially insecure, state.Solution
Navigate to and open:/usr/lib/vmware-lookupsvc/conf/catalina.properties
Add or change the following line:
org.apache.catalina.startup.EXIT_ON_INIT_FAILURE=true
Restart the service with the following command:
# vmon-cli --restart lookupsvc
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_8-0_Y26M07_STIG.zip
Item Details
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-24, CAT|II, CCI|CCI-001190, Rule-ID|SV-259046r961122_rule, STIG-ID|VCLU-80-000062, Vuln-ID|V-259046
Plugin: Unix
Control ID: 312f99dc42b852c74275c5534207534c72a82f8509023b85d779bae99d1f7837